> JapanHacked_
[Contained][Severity: Critical][Ransomware]

Baccarat Pacific: unauthorized access to its servers may have leaked about 300,000 customer records in Japan, and part was published online

It confirmed unauthorized access on September 22 and a ransom was demanded. Some customer data was published online on October 20. About 300,000 records in Japan may have leaked.

Disclosed

2023-10-31

Organizations involved

1

Leaked or at risk

Unknown

Downtime

Unknown

What happened

  1. It confirmed unauthorized access to its information equipment by a third party and cut the equipment off from the network. It also reported to the Personal Information Protection Commission. [1] [3]

  2. It learned that part of the information had been published on the internet. [1]

  3. It published an update, confirming that part of the customer data was published. It describes the attack as ransomware, saying a ransom was demanded of its French headquarters. [1] [3]

Impact

In October it announced that some activities, including the online shop, were restricted. About 300,000 customer records in Japan may have leaked, with name, address, phone number, birth date, email address, occupation and company name. It does not store credit card data, which is out of scope. [1] [2]

Timeline

  1. Started, Detected 2023-09-22
  2. Disclosed 2023-10-31
  3. 39 days

Attack or cause

Method
[Ransomware]
Impact
[Data leak][Service outage][Extortion]
Entry point
Unknown

Data exposed or at risk

[Name][Postal address][Phone number][Date of birth][E-mail address][Employment]

Organizations involved

Open in organization search

Sources

  1. [1][News]バカラが不正アクセス被害、国内で個人情報30万件が流出の可能性Nikkei xTECH · 2023-11-02
  2. [2][News]バカラのサーバに不正アクセス、オンラインショップ等の活動に制限ScanNetSecurity · 2023-10-23 08:05
  3. [3][News]バカラ 不正アクセス続報、顧客情報の一部公開を確認ScanNetSecurity · 2023-11-09 08:05